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Top Stories 

• A 50-mile stretch of Interstate 15 in Clark County, Nevada, remained closed to traffic as 
crews work to repair the road from floodwaters September 9 due to heavy rain that required 
nearly 200 residents to evacuate and closed several schools. - KLAS 8 Las Vegas (See item 

6) 

• Arizona declared a state of emergency September 8 as floodwaters led to one death, 
flooded a portion of Interstates 10 and 17, and forced the closure of dozens of schools. 

- Associated Press (See item 9 ) 

• The In His Image Youth Development Center in Little Rock, Arkansas, was closed 
September 8 after copper thieves caused more than $150,000 in damage to five air 
conditioning units located on the roof of the preschool’s building. - KATV 7 Little Rock 
(See item 19 ) 

• Home Depot representatives confirmed September 8 that the company’s payment systems 
were breached as early as April 2014 and went unnoticed until September 2 when banking 
institutions reported unusual activity connected to debit and credit card data from the 
company’s stores in the U.S. and Canada - CNN Money(See item 29 ) 
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Energy Sector 



1. September 9, Crain ’s Detroit Business - (Michigan) DTE: Friday’s storm was eighth 
worst; 41,000 still without power in metro Detroit. DTE Energy reported that 41,000 
customers were still without power September 9 after storms knocked out power to 
375,000 customers in southeast Michigan September 5. Power was expected to be 
restored to all customers by later September 9 or September 10. 

Source: http://www.crainsdetroit.com/article/20140908/NEWS/140909871/dte-fridavs- 
storm-was-eighth-worst-89000-still-without-power-in# 

For another story, see item 27 
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Chemical Industry Sector 

See item 7 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. September 9, Associated Press - (Missouri) Worker dies at Bridgeton refrigeration 
factory. A worker was killed September 8 at a Hussmann refrigeration equipment 
manufacturing facility in Bridgeton, Missouri. State and federal inspectors are 
investigating and preliminary findings showed that electrical power to equipment may 
not have been cut prior to the man working on it. 

Source: http://fox2now.com/2014/09/09/worker-dies-at-bridgeton-refrigeration-factorv/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

3. September 9, KTLA 5 Los Angeles - (California) ‘Hills Bandit’ strikes Laguna Niguel 
and La Jolla banks on the same day. A suspect known as the “Hills Bandit” was 
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linked to the attempted robbery of a bank in La Jolla and the robbery of a U.S. Bank 
branch in Laguna Niguel September 8, the ninth robbery the suspect is believed 
responsible for. 

Source: http://ktla.com/2014/09/Q8/hills-bandit-strikes-laguna-niguel-and-la-iolla- 
banks-in-same-day/ 

4. September 9, KTLA 5 Los Angeles - (California) ‘Cal Bear Bandit’ robs third 
Orange County bank. A suspect known as the “Cal Bear Bandit” was identified in the 
robbery of a Bank of America branch in Costa Mesa September 8, the third bank 
robbery linked to the suspect. 

Source: http://ktla.com/2014/09/08/cal-bear-bandit-robs-third-orange-county-bank/ 

5. September 7, Parsippany-Troy Hills Daily Record - (New Jersey; Florida) Pastor 
admits role in $15 million mortgage fraud scheme. A pastor with the defunct 
ReBirth International Church in Elizabeth pleaded guilty September 4 to his role in a 
$15 million mortgage fraud scheme that used straw buyers and fraudulent documents to 
make illegal profits involving overbuilt condominiums in Wildwood Crest and North 
Wildwood, New Jersey, and in Naples Florida. The man was among 13 defendants 
charged in the case. 

Source: http://www.dailvrecord.com/storv/news/crime/2014/09/07/pastor-admits-role- 
million-mortgage-fraud-scheme/15 140953/ 

T Return to top ] 



Transportation Systems Sector 

6. September 9, KLAS 8 Las Vegas - (Nevada) 1-15 closed for days, flooding impacting 
Overton, Logandale. Heavy rains September 8 washed away a portion of Interstate 15 
between Glendale and Mesquite and prompted a 3 - 4 day closure of a nearly 50-mile 
stretch of the freeway in Clark County while crews repair the road. Nearly 200 
residents were evacuated from homes at the Moapa River Indian Reservation and 
several schools were closed September 9. 

Source: http://www.8newsnow.com/story/26477250/ndot-i-15-will-be-closed-3-to-4- 
days 

7. September 9, Knoxville News Sentinel - (Tennessee) Crews neutralize spilled acid 
along 1-40 East. An eastbound lane of Interstate 40 in West Knox County reopened to 
traffic after being closed for more than 12 hours as crews worked to contain about 30 
gallons of flammable, organic acid that spilled alongside the roadway when the driver 
of a semi-truck pulled into a weigh station that was closed for renovation and went off 
the edge causing the truck’s cargo to shift. 

Source: http://www.knoxnews.com/news/traffic/crews-working-to-clean-up-acid-spill- 
along-i40-east 20594378 

8. September 9, KTVT 11 Fort Worth - (Texas) Deadly crash closes Highway 114 in 
Denton County. One person was killed and three others were injured in a multi- vehicle 
crash on State Highway 114 in Denton County when two semi-trucks collided and 
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struck two additional vehicles, closing the roadway for several hours. 

Source: http://dfw.cbslocal.com/2014/09/09/deadlv-crash-closes-highwav-114-in- 
denton-county/ 

9. September 8, Associated Press - (Arizona) Cars engulfed as rain sets record for 
Phoenix. Arizona declared a state of emergency September 8 as floodwaters led to one 
death, flooded a portion of Interstates 10 and 17, forced the closure of dozens of 
schools. 

Source: http://news.msn.com/us/cars-engulfed-as-rain-sets-record-for- 
phoenix?ocid=ansnews 1 1 

10. September 8, Jamestown Sun - (North Dakota) No one hurt when train derails at 
Dickinson. Crews were able to quickly contain a natural gas leak that resulted from a 
crash when four flatbed railcars and boxcars derailed from a BNSF train in Dic ki nson 
September 6. 

Source: http://www.iamestownsun.com/content/no-one-hurt-when-train-derails- 
dickinson 
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Food and Agriculture Sector 

11. September 9, KVEW 42 Kennewick - (Washington) Ammonia leak contained at 
Pasco Processing LLC. An ammonia leak at Pasco Processing LLC in Washington 
September 9 prompted the evacuation of 200 employees from the food processing 
facility and sent 5 individuals to local hospitals with minor injuries. Crews took over 2 
hours to isolate the leak, and the containment process was expected to take at least 4 
additional hours. 

Source: http://www.kvewtv.com/article/2014/sep/09/breaking-ammonia-leak-pasco- 
processing-llc/ 

12. September 9, U.S. Food and Drug Administration - (National) Publix recalls private 
label jalapeno bagels. Publix issued a voluntary recall September 5 for its Publix 
Jalapeno Bagels due to the possibility that the product may contain shards of glass or 
stone fragments. The product was sold in the self-service bins and artisan cases inside 
stores in four States. 

Source: http://www.fda.gov/Safety/Recalls/ucm413408.htm?source=govdeliverv 

13. September 8, Food Poisoning Bulletin - (New York) Shellfishing stopped in New 
York after Vibrio outbreak. The New York Department of Environmental 
Conservation issued September 5 a ban on harvesting shellfish, including oysters and 
hard clams, from an area of at least 4,400 acres within the Town of Huntington due to 
reports of foodbome illness caused by the bacteria Vibrio parahaemolyticus. The ban 
will remain in place until investigators determine the shellfish are safe for human 
consumption. 

Source: http://foodpoisoningbulletin.com/2014/shellfishing-stopped-in-new-vork-after- 
vibrio-outbreak/ 
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Water and Wastewater Systems Sector 

14. September 8, RARE 1 IMinneapolis - (Minnesota) Boil water order continues in 
Brainerd. A boil water advisory remained in effect for residents in Brainerd following 
a water main break and storm that knocked out power to Brainerd’ s municipal water 
pumps. Officials stated that they may lift the advisory as soon as September 9 if water 
tests are satisfactory. 

Source: http://www.karell.com/story/news/local/2014/09/08/boil-water-order- 
continues-in-brainerd/1 53 17439/ 

15. September 8, WTVA 9 Tupelo - (Mississippi) Boil water advisory issued for Blue 
Springs Water. A boil water advisory was issued by the Blue Springs Water 
Association for residents in Fairfield after a water line was cut and caused a loss of 
pressure in the water system September 8. 

Source: http://www.wtva.com/news/local/storv/Boil-water-advisory-issued-for-Blue- 
Springs-Water/BJHqwF2rxOKAJLHaBKC98w.cspx 
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Healthcare and Public Health Sector 

16. September 9, KARK 4 Arkansas - (Arkansas) Overnight fire destroys most of 
Gathright Medical Plaza in Arkadelphia. Three of four businesses in the Gathright 
Medical Plaza in Arkadelphia were destroyed in a fire September 8. The cause of the 
fire was under investigation. 

Source: http://www.arkansasmatters.eom/storv/d/story/ovemi ght- fire-destroys-most-of- 
gathright-medical/33591/VX3iW9uduEWp5w6fkAkMkg 

17. September 9, Associated Press - (South Carolina) Columbia hospital: Some 
information compromised. The Dorn Veterans Administration hospital in Columbia, 
South Carolina, stated September 8 that it began contacting former patients after 4 
boxes of pathology reports were reported missing, potentially affecting around 2,000 
patients. The reports contained names, Social Security numbers, and pathology results. 
Source: http://www.sfgate.com/news/article/Columbia-hospital-Some-inforrnation- 
compromised-5743560.php 

18. September 8, Washington Post - (National) Audit: Homeland Security ‘ill-prepared’ 
for potential pandemics. The DHS inspector general released a report September 8 
that found that the department’ s preparations for pandemic events were inadequate due 
to lack of proper inventory controls, supply-replenishment plans, and adherence to 
department guidelines. DHS management agreed with the inspector general’s 
recommendations, with some issues previously identified and acted upon. 

Source: http://www.washingtonpost.com/blogs/federal-eve/wp/2014/09/08/audit- 
homeland-security-ill-prepared-for-potential-pandemics/ 
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Government Facilities Sector 

19. September 9, KATV 7 Little Rock - (Arkansas) Copper thieves target Little Rock 
preschool. The In His Image Youth Development Center in Little Rock was closed 
September 8 after copper thieves caused more than $150,000 in damage to five air 
conditioning units located on the roof of the preschool’s building. 

Source: http ://w w w .katv .com/story/2648004 1 /copper-thieves -target-little -rock-pre- 
school 

20. September 8, WCAX 3 Burlington - (New York) Arson suspected in Ticonderoga 
school fire. Ticonderoga elementary school in Essex County will remain closed 
through September 10 following a fire that broke out September 5 and damaged most 
of the structure. Authorities reported that the fire was set in three locations inside the 
building and that it appears suspicious. 

Source: http://www.wcax.com/storv/26476809/arson-suspected-in-ticonderoga-school- 
fire 

For additional stories, see items 6 , 9 , 17 , and 27 
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Emergency Services Sector 

21. September 8, WAFB 9 Baton Rouge - (Louisiana) Brusly Police Department audit 
released. The Brusly Police Department is working with federal investigators to 
recover 13 missing firearms after an audit September 8 revealed 20 weapons were 
unaccounted for instead of 7 from an earlier investigation that alleged a former police 
chief committed theft of firearms and forgery. The audit also revealed other 
questionable administrative practices within the police department under the chief’s 
tenure including personal bank transactions on police department financial accounts 
and improperly maintained personnel files of officers. 

Source: http://www.wafb.com/storv/26481133/bruslv-police-department-audit-released 
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Information Technology Sector 

22. September 9, Softpedia - (International) Malvertising on YouTube and Amazon 
delivers sophisticated malware. Researchers with Cisco’s Talos Security Research 
identified a malvertising campaign dubbed Kyle & Stan that began in May and is 
currently affecting Windows and Mac users on popular Web sites such as Amazon and 
YouTube. The campaign inserts malicious ads that serve various forms of spyware, 
adware, and browser hijacking malware and uses unique configuration files and 
encryption to attempt to avoid detection. 
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Source: http://news.softpedia.com/news/Malvertising-On-YouTube-and-Amazon- 
Delivers-Sophisticated-Malware-45821 l.shtml 



23. September 9, Softpedia - (International) Dyre banking trojan targets Salesforce 
customers. Customer relationship management (CRM) provider Salesforce found that 
the Dyre banking malware (also known as Dyreza) has been used against some of its 
customers but found no evidence that any were impacted. The malware uses man-in- 
the-middle (MitM) attacks to steal credentials and Salesforce advised its users to ensure 
that their systems were protected against the malware. 

Source: http://news.softpedia.com/news/Dvre-Banking-Troian-Targets-Salesforce- 
Customers-458185.shtml 



24. September 9, V3.co.uk - (International) Hackers going Nuclear following Blackhole 
takedown. A Zscaler ThreatLabz researcher identified a campaign utilizing the Nuclear 
Exploit Kit and compromised sites including SocialBlade.com, AskMen.com, and 
Facebook survey scam pages to attempt to infect users’ systems. The researcher 
reported that the Nuclear Exploit Kit has become increasingly popular in the last 3 
months following the arrest of the alleged creator of the Blackhole Exploit Kit. 

Source: http://www.v3.co.uk/v3-uk/news/2364131/hackers-going-nuclear-following- 
blackhole-takedown 

25. September 8, Threatpost - (International) New timing attack could de-anonymize 
Google users. Mavenlink identified and reported an issue in Google accounts that 
could be used by an attacker in specific circumstances to identify when a particular user 
visits a site by sharing a Google document with the user’s address. Google 
acknowledged the issue but stated it would not address the issue because the risk 
presented was judged to be low and only usable in limited circumstances. 

Source: http://threatpost.com/new-timing-attack-could-de-anonymize-google-users 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

26. September 8, KJRH 2 Tulsa - (Oklahoma) Cox Communications restores services to 
Green Country customers after outage. Television service was restored to Cox 
Communications customers in Green County after an outage that disrupted service for 
several hours due to a fiber cut September 8. 

Source: http://www.kjrh.com/news/local-news/green-country-residents-lose-cable- 
after-cox-reports-outage 
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Commercial Facilities Sector 

27. September 9, WVEC 13 Hampton - (Virginia) High water floods parts of Hampton 
Roads for a second day. Heavy storms that moved across Hampton September 8 - 
September 9 prompted the evacuation of children and staff at the KinderCare day care 
facility, as well as about 25 residents from the Paula Maria Apartments complex. 
Several businesses and schools opened on a delayed schedule September 9, and crews 
worked to restore power to the more than 18,000 customers that lost service. 

Source: http://www.wvec.com/news/mobile/Churchland-section-of-Portsrnouth-hit-bv- 
flooding— 274439541 .html 

28. September 9, Associated Press - (California) Fire damages Magic Mountain roller 
coaster. Authorities are investigating the source of a September 8 fire that caused the 
Colossus roller coaster at the Six Flags Magic Mountain amusement park in Valencia to 
partially collapse while workers were disassembling the recently-closed ride. 

Source: http://news.msn.com/us/fire-damages-magic-mountain-roller-coaster 

29. September 9, CNN Money - (International) Home Depot confirms months-long hack. 
Home Depot representatives confirmed September 8 that the company’s payment 
systems were breached as early as April 2014 and the attack went unnoticed until 
September 2 when banking institutions reported unusual activity connected to debit and 
credit card data from the company’s stores in the U.S. and Canada. The company is 
working with the U.S. Secret Service to determine the scope of the breach and has 
implemented additional security measures at its stores. 

Source: http://monev.cnn.com/2014/09/08/technology/securitv/home-depot- 
breach/index . html 



30. September 8, WVNY 22 Burlington; WFFF 44 Burlington - (Vermont) Copper theft 
jeopardizes ice making at Highgate Sports Arena. Two large copper pipes connected 
to an outside condenser at the Highgate Sports Arena in Vermont were stolen, 
rendering the unit unusable and forcing the arena to close indefinitely. Damage is 
estimated to total at least $10,000. 

Source: http://www.mvchamplainvallev.com/story /d/story/copper-theft-jeopardizes-ice- 
making-at-highgate-sp/21793/7DSxiEwUgUiRiJRwf5jYTA 

31. September 8, Toledo Blade - (Ohio) Criminal charges possible after fire at Walmart 
store in Tiffin. A Walmart Supercenter in Tiffin remained closed September 8 due to 
damage that resulted from a fire that was intentionally set in the store’s sporting goods 
section September 5 and triggered the store’s sprinkler system to activate. Police are 
investigating evidence that may lead to the identification of a suspect. 

Source: http://www.toledoblade.com/Police-Fire/2014/09/08/Criminal-charges- 
possible-after-fire-at-Walmart-store-in-Tiffin.html 
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Dams Sector 



32. September 9, Waterloo - Cedar Falls Courier - (Iowa) Waterloo City Council Oks 
flood control repairs. A $591,500 contract with Boulder Contracting of Grundy 
Center was approved by Waterloo City Council members to repair 21 flood control 
gatewells along the Cedar River and Black Hawk Creek levees which have become 
worn due to opening and closing, and general wear and tear. 

Source: http://wcfcourier.com/news/local/govt-and-politics/waterloo-city-council-oks- 
flood-control-repairs/article 5f6fl45f-e5c7-52ff-84ab-44bl5c05b576.html 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
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